Hello everybody and Googlers in specific, While analysing the DMARC reports for a customer I noticed the following.
A customer uses Salesforce. The emails that Salesforces sends are relayed using a server at our customers side which delivers it at the recipient. We get different SPF records while delivering to GMail vs Google Apps, an example below: Failed SPF: Customer IP is marked as sending IP Passed SPF: Salesforce IP is marked as sending IP I understand that neither of these mails will be DMARC compliant and we're working on improving this, but I noticed this difference and couldn't explain it.... FAILED SPF: Delivered-To: RANDOMUSERgmail.com Return-Path: <[email protected]> Received: from CUSTOMERSERVER (CUSTOMERSERVER. [CUSTOMER_IP]) by mx.google.com with ESMTP id ID for <RANDOMUSERgmail.com>; DATE TIME (PDT) Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate CUSTOMER_IP as permitted sender) client-ip=CUSTOMER_IP; Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning [email protected] does not designate CUSTOMER_IP as permitted sender) [email protected]; dmarc=fail (p=NONE dis=NONE) header.from=Customer.com Received: from aserver.salesforce.com ([SALES_FORCE_IP]) by CUSTOMERSERVER with ESMTP; DATE TIME Return-Path: <[email protected]> X-SFDC-Interface: internal Received: from [OTHERSALEFORCEIP] ([OTHERSALEFORCEIP:50309] helo= SOMEHOST.sfdc.net) by mta.salesforce.com (envelope-from <[email protected]>) id; SENT_DATE Date: SENT_DATE (GMT) From: <[email protected]> To: "RANDOMUSERgmail.com" <RANDOMUSERgmail.com> Passed SPF: Delivered-To: [email protected] Return-Path: <[email protected]> Received: from CUSTOMERSERVER (CUSTOMERSERVER. [CUSTOMER_IP]) by mx.google.com with ESMTP id ID for <[email protected]>; DATE TIME (PDT) Received-SPF: pass (google.com: domain of [email protected] designates SALES_FORCE_IP as permitted sender) client-ip=SALES_FORCE_IP; Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] SALES_FORCE_IP as permitted sender) smtp.mail= [email protected] Received: from aserver.salesforce.com ([SALES_FORCE_IP]) by CUSTOMERSERVER with ESMTP; DATE TIME Return-Path: <[email protected]> X-SFDC-Interface: internal Received: from [OTHERSALEFORCEIP] ([OTHERSALEFORCEIP:50309] helo= SOMEHOST.sfdc.net) by mta.salesforce.com (envelope-from <[email protected]>) id; SENT_DATE Received: from [ANOTHERSALESFORCEIP] by na10.salesforce.com via HTTP; DATE TIME Date: SENT_DATE (GMT) From: "Customer.com" <[email protected]> To: "[email protected]" <[email protected]> Kindest regards, Michiel van de Vis E-ngine
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
